Lucene search

[email protected]CVE-2014-4009

HistoryJun 09, 2014 - 8:55 p.m.

CVE-2014-4009

2014-06-0920:55:00

CWE-255

[email protected]

web.nvd.nist.gov

sap

ccms monitoring

bc-ccm-mon

hardcoded credentials

remote attackers

nvd

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.8%

JSON

SAP CCMS Monitoring (BC-CCM-MON) has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

CPENameOperatorVersion
sap:computing_center_management_system_monitoringsap computing center management system monitoringeq-

CPE	Name	Operator	Version
sap:computing_center_management_system_monitoring	sap computing center management system monitoring	eq	-

References

scn.sap.com/docs/DOC-8218

seclists.org/fulldisclosure/2014/Jun/36

www.securityfocus.com/bid/67920

service.sap.com/sap/support/notes/1911174

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.8%

JSON

Related for CVE-2014-4009

cvelist1 prion1